Stefan Froehlich
2004-Feb-15 22:24 UTC
[Samba] 2.2.5 talking to 3.0.2: can join, but not use a Domain
Hello, I have a Samba client (jessica, running on 2.2.5), which has joined a Domain with a Samba PDC (bertha, running on 3.0.2). I have done: | jessica:/var/log/samba# smbpasswd -U root -j MEITNER | Password: | Joined domain MEITNER. And jessica is as well in the LDAP-database, maintained by the PDC. But now, I want to log in and miserabely fail: | sfroehli@tanja:~$ smbclient //jessica/www -U sfroehli | Password: | Domain=[MEITNER] OS=[Unix] Server=[Samba 2.2.5] | tree connect failed: NT_STATUS_WRONG_PASSWORD A long while of digging in the log files revealed the following. On jessica: | [2004/02/15 22:28:43, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(221) | cli_net_req_chal: LSA Request Challenge from BERTHA to JESSICA: 7CDE1E0D8E84D0C5 | [2004/02/15 22:28:43, 4] rpc_client/cli_netlogon.c:cli_net_auth2(132) | cli_net_auth2: srv:\\BERTHA acct:JESSICA$ sc:2 mc: JESSICA chal D1872E31A6704034 neg: 1ff And on bertha: | [2004/02/15 22:28:43, 5] libsmb/credentials.c:cred_session_key(61) | clnt_chal: 7CDE1E0D8E84D0C5 | [2004/02/15 22:28:43, 5] libsmb/credentials.c:cred_assert(123) | challenge : D1872E31A6704034 | [2004/02/15 22:28:43, 5] libsmb/credentials.c:cred_assert(124) | calculated: A23147887D28D908 So the authentification goes completely wrong. How can this be? After a good while of searching, I found some suspicious entries in the logfiles, whenever jessica (re)joins the domain: | [2004/02/15 23:04:06, 5] rpc_server/srv_samr_nt.c:set_user_info_pw(2878) | Attempting administrator password change for user jessica$ | [2004/02/15 23:04:06, 3] lib/charcnv.c:convert_string_internal(221) | convert_string_internal: Conversion error: Illegal multibyte sequence(<ED><BA><B3><A9>2e?<97>(<A7><ED>B<F8><A8>Oe<B4>#>CmKu8^X) | [2004/02/15 23:04:06, 3] lib/charcnv.c:convert_string_internal(221) | convert_string_internal: Conversion error: Illegal multibyte sequence(<B3><A9>2e?<97>(<A7><ED>B<F8><A8>Oe<B4>#>CmKu8^X) | [2004/02/15 23:04:06, 3] lib/charcnv.c:convert_string_internal(221) | [...] | [2004/02/15 23:04:06, 3] lib/charcnv.c:convert_string_internal(221) | convert_string_internal: Conversion error: Illegal multibyte sequence(HI) Is this critical? If yes, how to circumvent it? I have | display charset = ISO8859-15 | unix charset = ISO8859-15 | dos charset = CP850 which seems to work for the filesystems, but perhaps there is some other internal problem with odd characters? Please help! Regards, Stefan